From 076f1d4a79684af7a7444acb5c92b89291e3dd97 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lu=C3=ADs=20Gon=C3=A7alves?= <luis.fgoncalv@gmail.com>
Date: Tue, 28 Jun 2022 17:37:58 +0100
Subject: [PATCH] Upgrade Apache Santuario to 2.3.0 (#261)

---
 pom.xml                                       |   2 +-
 src/test/cert/gva/raizaccv1_der_11.crl        | Bin 0 -> 705 bytes
 .../xades4j/production/SignerBESTest.java     |  45 ++++++++++--------
 .../verification/XadesVerifierImplTest.java   |  10 +++-
 4 files changed, 35 insertions(+), 22 deletions(-)
 create mode 100644 src/test/cert/gva/raizaccv1_der_11.crl

diff --git a/pom.xml b/pom.xml
index 04fd07ea..8ccbd0aa 100644
--- a/pom.xml
+++ b/pom.xml
@@ -59,7 +59,7 @@
         <dependency>
             <groupId>org.apache.santuario</groupId>
             <artifactId>xmlsec</artifactId>
-            <version>2.2.3</version>
+            <version>2.3.0</version>
         </dependency>
         <dependency>
             <groupId>org.bouncycastle</groupId>
diff --git a/src/test/cert/gva/raizaccv1_der_11.crl b/src/test/cert/gva/raizaccv1_der_11.crl
new file mode 100644
index 0000000000000000000000000000000000000000..819ff8a671c4289f651dc7d4e6eabae4e615453f
GIT binary patch
literal 705
zcmXqLV%lraxQvOB(SVnYQ>)FR?K>|cBR4C9fs>(-fdCtGC<`+Wr=zoTSdgP<l%b)3
z0Ut<=n}<EX+Y=;g$ZNn265--u0du(xI6+)CVJ6pLab6=M0}~?)15+bY6VoUV*U-So
z6v|y-V4!Cp4^%9x%pzeR)*y1Jeaqwf=IWC}zlFVOd}?;4N6vmP*l<}978WKZhRbM9
zWNu<&WC&uF{2|jg{k8d1%{IZud!}!8d+N6F%|UBMsk9}#pXgp*c2>josp+#d1{Rh1
zrjJ+b{de}p>^pt?yl&S@Sn8gNE$?};ktyurw&!PkGIt0)f2Mu5?Xlh8U50<=Z!1ig
z7k4zR^Ji|xF~*5}$!FIuy6`Z>d)3Rg8*V@3&;2!5N9dx9>YwjRUtG9!k)dSP434kG
zG5Z1}bymhI=7=79e`}WOvxfh9yJxr*nl78YCE#9u>4sWHg}D7IZ~v^^dOYNQNM?Ua
zgsg|j!ArWQp1+v4=D<v^yd(B%p0!5dKK+}rH5+W07#^iuV-L#Aial6W;{Bn)!~gTM
zr_AD2x6|WKXXK}4+!Z<h&F$NTmGf$gXFW=ocJ22`@3T1_`-69c$JEXjj90mF_xF{p
z7h9co2{-g}?0Y2j<n~D}rrD=z&fS~4bFrw%r>d>`w~bDg%gpI0X!YfLEb}3!b8aZl
z_cKM?vf}Nhet0uUbioe$x&E6{RdW{RU;5Q<IPLRno_N!achkz}_xPnOsaE;?f4lb0
zGeuAPcJHZ^c(uauwBT0P59^a27wuYp<Bzk8y?fmINd|2%R==vBd3Wx^wA!6FZuR~-
zIB8Li>iPvz$LjX&>-W8-*mv0Q>=m<PdJZ8Pa^F70Yp--Z9`k3zw|5&~=^k#ey!=Mt
i+m#JV%cKlk=a@{K+j4bn=@Uhn-)p*6^enzx#RC9JVm{&k

literal 0
HcmV?d00001

diff --git a/src/test/java/xades4j/production/SignerBESTest.java b/src/test/java/xades4j/production/SignerBESTest.java
index c48c825b..ed775363 100644
--- a/src/test/java/xades4j/production/SignerBESTest.java
+++ b/src/test/java/xades4j/production/SignerBESTest.java
@@ -16,6 +16,9 @@
  */
 package xades4j.production;
 
+import org.apache.xml.security.stax.impl.resourceResolvers.ResolverHttp;
+import org.apache.xml.security.utils.resolver.implementations.ResolverDirectHTTP;
+import org.apache.xml.security.utils.resolver.implementations.ResolverLocalFilesystem;
 import org.junit.Test;
 import org.w3c.dom.Document;
 import org.w3c.dom.Element;
@@ -37,7 +40,6 @@
 import java.io.File;
 
 /**
- *
  * @author Luís
  */
 public class SignerBESTest extends SignerTestBase
@@ -45,7 +47,7 @@ public class SignerBESTest extends SignerTestBase
     public SignerBESTest()
     {
     }
-    
+
     @Test
     public void testSignBES() throws Exception
     {
@@ -59,7 +61,7 @@ public void testSignBES() throws Exception
 
         IndividualDataObjsTimeStampProperty dataObjsTimeStamp = new IndividualDataObjsTimeStampProperty();
         AllDataObjsCommitmentTypeProperty globalCommitment = AllDataObjsCommitmentTypeProperty.proofOfApproval();
-        CommitmentTypeProperty commitment = (CommitmentTypeProperty)CommitmentTypeProperty.proofOfCreation().withQualifier("MyQualifier");
+        CommitmentTypeProperty commitment = (CommitmentTypeProperty) CommitmentTypeProperty.proofOfCreation().withQualifier("MyQualifier");
         DataObjectDesc obj1 = new DataObjectReference('#' + elemToSign.getAttribute("Id")).withTransform(new EnvelopedSignatureTransform()).withDataObjectFormat(new DataObjectFormatProperty("text/xml", "MyEncoding").withDescription("Isto é uma descrição do elemento raiz").withDocumentationUri("http://doc1.txt").withDocumentationUri("http://doc2.txt").withIdentifier("http://elem.root")).withCommitmentType(commitment).withDataObjectTimeStamp(dataObjsTimeStamp);
         DataObjectDesc obj2 = new EnvelopedXmlObject(objectContent, "text/xml", null).withDataObjectFormat(new DataObjectFormatProperty("text/xml", "MyEncoding").withDescription("Isto é uma descrição do elemento dentro do object").withDocumentationUri("http://doc3.txt").withDocumentationUri("http://doc4.txt").withIdentifier("http://elem.in.object")).withCommitmentType(commitment).withDataObjectTimeStamp(dataObjsTimeStamp);
         SignedDataObjects dataObjs = new SignedDataObjects(obj1, obj2).withCommitmentType(globalCommitment).withDataObjectsTimeStamp();
@@ -96,7 +98,10 @@ public void testSignBESExternalRes() throws Exception
         DataObjectDesc obj1 = new DataObjectReference("logo-01.png")
                 .withDataObjectFormat(new DataObjectFormatProperty("image/png").withDescription("XAdES4j logo"))
                 .withDataObjectTimeStamp(new IndividualDataObjsTimeStampProperty());
-        signer.sign(new SignedDataObjects(obj1).withBaseUri("http://luisgoncalves.github.io/xades4j/images/"), doc);
+        signer.sign(new SignedDataObjects(obj1)
+                        .withBaseUri("http://luisgoncalves.github.io/xades4j/images/")
+                        .withResourceResolver(new ResolverDirectHTTP()),
+                doc);
 
         outputDocument(doc, "document.signed.bes.extres.xml");
     }
@@ -135,31 +140,33 @@ public void provideProperties(
     public void testSignBESDetachedWithXPathAndNamespaces() throws Exception
     {
         System.out.println("signBESDetachedWithXPathAndNamespaces");
-        
+
         Document doc = getNewDocument();
-        
+
         XadesSigner signer = new XadesBesSigningProfile(keyingProviderMy)
                 .withBasicSignatureOptions(new BasicSignatureOptions()
-                    .includeSigningCertificate(SigningCertificateMode.SIGNING_CERTIFICATE)
-                    .includeIssuerSerial(true)
-                    .includeSubjectName(true)
-                    .signKeyInfo(true))
+                        .includeSigningCertificate(SigningCertificateMode.SIGNING_CERTIFICATE)
+                        .includeIssuerSerial(true)
+                        .includeSubjectName(true)
+                        .signKeyInfo(true))
                 .newSigner();
-        
+
         DataObjectDesc obj1 = new DataObjectReference("document.xml")
                 .withTransform(
-                    new XPathTransform("/collection/album/foo:tracks")
-                        .withNamespace("foo", "http://test.xades4j/tracks"))
+                        new XPathTransform("/collection/album/foo:tracks")
+                                .withNamespace("foo", "http://test.xades4j/tracks"))
                 .withDataObjectFormat(new DataObjectFormatProperty("text/xml"));
-        
+
         DataObjectDesc obj2 = new DataObjectReference("document.xml")
                 .withTransform(
-                    XPath2Filter.intersect("/collection/album/bar:tracks/bar:song[@tracknumber = 1]")
-                        .withNamespace("bar", "http://test.xades4j/tracks"));
-        
-        SignedDataObjects objs = new SignedDataObjects(obj1, obj2).withBaseUri(new File("src/test/xml/").toURI().toString());
+                        XPath2Filter.intersect("/collection/album/bar:tracks/bar:song[@tracknumber = 1]")
+                                .withNamespace("bar", "http://test.xades4j/tracks"));
+
+        SignedDataObjects objs = new SignedDataObjects(obj1, obj2)
+                .withBaseUri(new File("src/test/xml/").toURI().toString())
+                .withResourceResolver(new ResolverLocalFilesystem());
         signer.sign(objs, doc);
-        
+
         outputDocument(doc, "detached.bes.xml");
     }
 }
diff --git a/src/test/java/xades4j/verification/XadesVerifierImplTest.java b/src/test/java/xades4j/verification/XadesVerifierImplTest.java
index 76ddb772..926cf7af 100644
--- a/src/test/java/xades4j/verification/XadesVerifierImplTest.java
+++ b/src/test/java/xades4j/verification/XadesVerifierImplTest.java
@@ -30,6 +30,8 @@
 import java.util.stream.Collectors;
 
 import org.apache.xml.security.signature.XMLSignature;
+import org.apache.xml.security.utils.resolver.implementations.ResolverDirectHTTP;
+import org.apache.xml.security.utils.resolver.implementations.ResolverLocalFilesystem;
 import org.junit.Before;
 import org.junit.Test;
 import org.w3c.dom.Document;
@@ -171,7 +173,9 @@ public void testVerifyDetachedBES() throws Exception
     {
         var result = verifySignature(
                 "detached.bes.xml",
-                new SignatureSpecificVerificationOptions().useBaseUri(new File("src/test/xml/").toURI().toString()));
+                new SignatureSpecificVerificationOptions()
+                        .useBaseUri(new File("src/test/xml/").toURI().toString())
+                        .useResourceResolver(new ResolverLocalFilesystem()));
 
         assertEquals(XAdESForm.BES, result.getSignatureForm());
 
@@ -229,7 +233,9 @@ public void testVerifyBESExtrnlResEnrichC() throws Exception
 
         Document doc = getDocument("document.signed.bes.extres.xml");
         Element signatureNode = getSigElement(doc);
-        SignatureSpecificVerificationOptions options = new SignatureSpecificVerificationOptions().useBaseUri("http://luisgoncalves.github.io/xades4j/images/");
+        SignatureSpecificVerificationOptions options = new SignatureSpecificVerificationOptions()
+                .useBaseUri("http://luisgoncalves.github.io/xades4j/images/")
+                .useResourceResolver(new ResolverDirectHTTP());
 
         XadesSignatureFormatExtender formExt = new XadesFormatExtenderProfile().with(DEFAULT_TEST_TSA).getFormatExtender();